Legal
Privacy policy
What we collect, why, and the choices you have. Written to be read.
Who we are
This website is operated by Gustara ("Gustara", "we", "us"). You can contact us at iongavrilas50@gmail.com.
This policy covers two things: this marketing website, where we are the data controller, and the Gustara ordering platform, where each venue is the data controller and we act on its behalf.
This website
What we collect
If you use our contact form or email us, we receive the details you give: your name, email address, venue or group name, optionally a phone number and the number of outlets you run, and your message.
This website does not use analytics, advertising or tracking technologies, and does not load third-party scripts or fonts. It sets no tracking cookies. See our cookies page for the single preference it stores on your device.
Why we use it
We use your enquiry details to reply to you, to arrange a walkthrough and to keep a reasonable record of our conversation. Our basis is taking steps at your request before a contract, and our legitimate interest in responding to business enquiries.
Who sees it
Only people at Gustara who need it to respond. We do not sell your data or use it for advertising.
How long we keep it
We keep enquiry details for as long as needed to deal with your enquiry and for reasonable business records afterwards, and then delete them. Ask us at any time if you would like yours removed sooner.
If you order at a venue that uses Gustara
When you order through a Gustara QR code, the venue decides why and how your data is used, which makes the venue the data controller. Gustara processes the data on the venue's behalf. For anything about your order or your data, contact the venue first.
What the platform records
- Your order: the items, notes, totals, tip and which table, room or spot you ordered from.
- Payment status. Card details are entered into Stripe's payment form and are handled by Stripe. They are not seen or stored by Gustara or the venue.
- Your email address, only if the venue has switched on emailed receipts or Stripe receipts and you chose to provide it.
- Marketing consent, only if the venue offers it and you ticked the box. It is recorded with the exact wording you saw, and is never required to order or to receive a receipt.
How long it is kept
Each venue sets its own retention periods for orders and for operational history. Financial and security records are kept for at least five years.
Your rights
Under UK data protection law you can ask to see the personal data we hold about you, to correct it, to have it erased, to restrict or object to its use, and to receive a copy in a portable format. To exercise a right over data held about you as a website visitor, email us. For data held by a venue, contact the venue. If you are unhappy with how your data has been handled, you can complain to the Information Commissioner's Office (ICO).
Changes
If we change this policy we will update the date above. Material changes will be noted on this page.